76

Re: Wishlist for iRedMail-0.8.0

f) roundcube? is this a web e-mail client that is tied into iRedmail?

     f1) can it be replace by any other open-source web email app? i like zimbra web email because it can seem like outlook, and zarafa????, but i don't think these two are open-source.

     f2) most people who, i think, use iRedMail are looking for an alternative from exchange and outlook, but need the same. Do you know if roundcube has any plans to update it to use AJAX (i think thats whats its call), so you can right-click do stuff.


g) Which do you recommend we installed LDAP or MYSQL?
     g1) what is the diff? in term of operation,spec,speed,backup and compatibility to a network of win,linux & mac pc's?
     g2) BTW why is there two storage system?

77

Re: Wishlist for iRedMail-0.8.0

fbifido wrote:

f) roundcube? is this a web e-mail client that is tied into iRedmail?

Yes.
Oops, did you try iRedMail ever?

fbifido wrote:

     f1) can it be replace by any other open-source web email app? i like zimbra web email because it can seem like outlook, and zarafa????, but i don't think these two are open-source.

No.

fbifido wrote:

     f2) most people who, i think, use iRedMail are looking for an alternative from exchange and outlook, but need the same. Do you know if roundcube has any plans to update it to use AJAX (i think thats whats its call), so you can right-click do stuff.

Replacing Exchange+Outlook is not one of goals of iRedMail project. If you're looking for this kind of products, you're in wrong forum.

fbifido wrote:

g) Which do you recommend we installed LDAP or MYSQL?

It's recommended to use the one you're familiar with.

78

Re: Wishlist for iRedMail-0.8.0

ZhangHuangbin wrote:
fbifido wrote:

b) Is there a way to block an extension? (but, see b1)

It's possible. Reference:
http://www.faqforge.com/linux/controlpa … pconfig-3/

fbifido wrote:

d) Is there a way to pop emails from a backup server like Godady?

Try fetchmail. It's not a iRedMail question.
http://fetchmail.berlios.de/

fbifido wrote:

e) is there a way to send all email from verified user using your isp mail server, that way  you can help stop spam, virus and prevent my ip from been black-listed, its a real pain to get unlisted?

Do you mean postfix setting "relayhost"? Reference:
http://www.postfix.org/postconf.5.html#relayhost

Thanks for your reply wink

h) Why can't these be done from with in the iRedMail interface?
    my question 'a)' was done from with-in iRedMail, and i think it is a fetchmail or postfix settings? (not 2 sure)

    h1) my bad on question 'c)', that is out of your hands, but thank you for your answer.


i) Ho  i just remember, there is a call to move from SMTP port 25 to DSMTP port 5##, can't recall the port number, will  iRedMail be using this?

79

Re: Wishlist for iRedMail-0.8.0

j) The new rage in email server now is backup and archiving, but not just any archiving, not sure what it's call, its like live-archiving. the sending and receiving emails of each user is backed up in a special accounts that only the administer can access.
when the admin access this account it has all the users name like folders and in each user folder there is a inbox & outbox, with the option to do a full or selective restore, print, forward ...etc. Will this be part of 0.8.0?

80

Re: Wishlist for iRedMail-0.8.0

"Oops, did you try iRedMail ever?"

yes, but not live, just with virtualbox on a network of 3 win-pc & outlook.
i want to try with a real network and real people, thats when you get to know what is needed and whats not?
We use kerio 6.x, but we have exchange lic&cd for 150 users, but never use it, because we want to go full open-source.
we remove about 42 win-pc and put-in ubuntu-pc, we still have win2003sbs for terminal-services (i don't think that one will change, but looking at zero-client box to save on energy).


"It's recommended to use the one you're familiar with"

and if i am not familiar with any of them, then?

81 (edited by fbifido 2011-04-28 02:45:16)

Re: Wishlist for iRedMail-0.8.0

k) Reporting !
would like to have a detail report file with chart on spam/email/attachments/block-email/..etc and the ability to export as excel or pdf or just print?  overall as well as per user?

82

Re: Wishlist for iRedMail-0.8.0

@fbifido

Ehm... not to be "picky", but this thread is about a wishlist for iRedmail 0.8.0, and you are flooding it with questions about the presence or not of features in the current version.
You can find 90% of the answers to your doubts just by reading the docs, FAQ, this forum and testing iRedmail.

I think you should:
1) Try to install and fiddle with all the features and configurations as with every open source software. Even if it is on a testing environment/server, you'll learn a lot.
2) Open a NEW thread in the appropriate category.
3) After you'll have done a bit of research on your setup and you're stuck on something I'm sure Zhang and all of us will be more than happy to help you out.

Nothing against you of course, but I think this is really becoming thread hi-jacking smile

Regards

Alberto

83

Re: Wishlist for iRedMail-0.8.0

include some RBLs but leave them commented using #

this way new admins can quickly find the proper lines to edit main.cf

84

Re: Wishlist for iRedMail-0.8.0

maybe include stats on postfix-queue (output of "postqueue -p" ?)
so we can see on dashboard how many mails are stuck

maybe also some kind of button "try to send all mails in queue = flush NOW" using

postqueue -f

85

Re: Wishlist for iRedMail-0.8.0

It might be a good place to place my idea...add also the ipv6 ip.

I've enabled it in postfix/dovecot.
If you wish,i can share what i did to enable it.

86

Re: Wishlist for iRedMail-0.8.0

mike.f wrote:

maybe include stats on postfix-queue (output of "postqueue -p" ?)

Not this moment.
Still no plan to make iRedAdmin access file system directly.

87

Re: Wishlist for iRedMail-0.8.0

Jochie wrote:

It might be a good place to place my idea...add also the ipv6 ip.

I've enabled it in postfix/dovecot.
If you wish,i can share what i did to enable it.

That's great, please create a new forum topic or wiki tutorial to share with us.

88

Re: Wishlist for iRedMail-0.8.0

ZhangHuangbin wrote:
Jochie wrote:

It might be a good place to place my idea...add also the ipv6 ip.

I've enabled it in postfix/dovecot.
If you wish,i can share what i did to enable it.

That's great, please create a new forum topic or wiki tutorial to share with us.

done :  http://www.iredmail.org/forum/post9303.html

89

Re: Wishlist for iRedMail-0.8.0

What about launch your new product: iRedCal and integrate that with iRedmail. So you get a new groupware.

90

Re: Wishlist for iRedMail-0.8.0

systeembeheer wrote:

What about launch your new product: iRedCal and integrate that with iRedmail. So you get a new groupware.

iRedCal? A calendar server? Sorry, no plan for this.

SOGo is considered as a great groupware, you can give it a try.

91

Re: Wishlist for iRedMail-0.8.0

Hallo

I'm pretty new to iRedMail so I cannot tell to much what I miss. There are two things I noticed after the first setup (which I would like to change):

  • please let me choose if i want webmail.mydomain.com or mydomain.com/webmail (or both?). a lot of bots scan ip.ad.dr.ess/phpmyadmin for older version. and hiding some tools in virtual domains offers some better handling

  • optional use of fcgi for php to run the tools as iredmail user(or just another one that www-data)

a thing I'm not sure about are the mailing lists. there is no nntp server? it's just distributing mail to the addresses in the list at the moment?

thanks! i might come back later with new ideas smile

92 (edited by c33s 2011-05-17 12:01:44)

Re: Wishlist for iRedMail-0.8.0

hi,

sorry for the long delay, catched a cold. twice. and then had a bunch of work to do, which got stockpiled because of the cold.

# iredmail wishlist
## more hardening
### fail2ban

happy to read that fail2ban is integrated.
would be great to add fail2ban easy configurable so it is easy to setup with shorewall

### extra secure flag

if "extra secure" is selected from the install wizard, non-encrypted protocolls are disabled by default, higher key values are choosen, ...

### ip login whitelist for (admin) accounts

option for preventing super-admin logins from other ips than specified in a special whitelist.
allowing customers to access his own admin account from every/his own ip but locking down the super admin account to my own ips (commer seperated list would help).

why? because this can't be managed on firewall layer, i want to allow logins for all user in the admin but the super-admin must not be accessible from there. maybe also add a seperation on domain layer:
https://admin.mailserver.com the only virtualhost wherefrom superadmin login is possible. https://customeradmin.mailserver.com allows only non-superadmin logins.

### phpmyadmin & phpldap with stronger security

as a other user posted before, apache aliases like phpmyadmin and phpldapadmin should not (must not) be accessible by from the public.

i understand your argument that you want to keep the installer simple, but especially servers from unexpierienced users, who don't know how to secure a server (or even know that they should do that) are likley hacked, because of not secured phpmyadmins and similar.

a good goal would be to provide a secure default setting (blocking all ips but a comma seperated list defined by the user) and add a wiki page how to disable it, not the way you mention it.
it is a good pracitce to first be secure and open up the gates later.

also a domain and a ip layer would be nice. it would be good for all critical services to lock them to specific domains and ports. if you add different ports for different services then the firewall of the users choice can also be used.

### apache server signature

set apache server signature to prod.
debian: /etc/apache2/conf.d/security

ServerTokens Prod

its allways good to prevent sniffing

### install php5-suhosin package

good thing for the php software is this small extra package for some extra security.

### key size

>It will check 'default_bits' in openssl.cnf first, if it's greater or equal to 2048, iRedMail will use it. Otherwise, uses 2048.
thank you very much!

## major integrated backup system
### backup & restore

i think, for production useage an integrated backup solution is nessesary. it sould work out of the box and not be a extra to configure feature. cron jobs should be activated by the install script and the backup scripts shoud be also correctly setup by the wizard (right connection parameter).
integrety checking would also be very good.

backup is absolutly nessesary, also for not expierienced user. it should just work and not be optional. if you make a backup optional it will be like no backup.

the restore feature should also be easy and work out of the box.

if i have a servercrash but have my single backup file (containing: iredmail config, vmaildirectory, mysqldb, ldapdb) it could look like that (fresh server):

bash iRedMail.sh --restore-backup=backupfilename.tar.gz

to get the exact state of the mailserver as before.

see also http://www.iredmail.org/forum/topic1989 … cript.html

### integrated backup panel (iredmailadmin(pro))

backups are really important. so you should see in the admin if the backups worked or not.
http://www.activecollab.com/docs/manual … ta-backup)
see also http://www.iredmail.org/forum/topic1989 … cript.html

### import & export

as i was confronted with a ldap problems see http://www.iredmail.org/forum/topic1990 … -work.html i would be happy to have a generic import & export mechanism. as a user i don't care about which db is used or what command is used for backup. as long as it works. in the moment i can't export my user and all the domains and accounts. so i will have to reenter them again by hand if the copy of the ldap dir don't work. for such cases a generic xml export of all the data would be perfect.

<xml...
<iredmail>
    <superusers>
        ...
    </superusers>
    <domains>
        <domain>
            <name>bla.foo</name>
            <users>
                <user>
                    ...
                    <aliases>
                        <alias>....</alias>
                    </aliases>
                </user>
            </users>
    </domains>
</iredmail>

why that? because massimport and export is then possible, you can migrate from ldap to mysql version or the otherway round. you have a generic, human readable backup of all your users, you don't have to deal with databases you don't know.


## database abstraction

don't stick with mysql. i started to code php 1998, my first php project had a database abstaction layer for mysql and postgres. i would really be happy, if not all opensource projects stick to mysql in a time where really enough good database abstaction layers and orms are available.

http://adodb.sourceforge.net/
http://www.doctrine-project.org/
http://sqlrelay.sourceforge.net/
http://www.propelorm.org/

why postgres? because its major database which supports assyncron syncing in 9.0 and has syncron syncing features in 9.1
this is future oriented, loadbalanceable and clusterable.


## +1

+1 for dspam
+1 for nginx
+1 for custom database server selection (inside the wizard)
+1 Users can maintain their own whitelists and blacklists
+1 Users can manage their own content filtering settings
+1 for outgoing mail
+1 lockdown "by IP/hostname" of phpmyadmin and phpldapadmin-directories would be nice
+1 calendar functions

## replies

>I prefer to keep installation wizard as simple as possible, then provide additions FAQs to help admins achieve other features.
make two wizard modes, a simple one and an advanced one but always choose the auto-secure option in the simple wizard.

## puppet installation "support"

puppet recipe to get the mailserver up and running (i am trying to write one)

edit:
some of the backup features are implemented (missed to subscribe my own topic http://www.iredmail.org/forum/topic1989 … ript.html) see the answers from ZhangHuangbin there smile

93

Re: Wishlist for iRedMail-0.8.0

c33s wrote:

set apache server signature to prod.

Bug, fixed moment ago:
http://code.google.com/p/iredmail/sourc … 2a69d6ad1e

94

Re: Wishlist for iRedMail-0.8.0

node wrote:
GENTOO SUPPORT!!!

Any one have idea how I can run iRedMail on Gentoo!?!!

I was working on Gentoo  support sometime ago. In fact I still have the iredmail build running on my main Gentoo email server now and it's never gone wrong.

To be honest I haven't worked on it for a while my family recently became +1. I'll dig out what I did and let other people improve it. A way of dealing with use flags would help, I had to manually add them before install.

I'd love to see Gentoo officially supported. I'll help has much as I can.

95

Re: Wishlist for iRedMail-0.8.0

Package installation for FreeBSD
use TBZ packages and don't compile everything from source.
I did not see MySQL 5.5 request and detection of existing Mysqld installed
Adding it to the BSD port tree would be great!

96

Re: Wishlist for iRedMail-0.8.0

I am still trying to perfect my install before going live, love the simplicity of iRedmail 0.71 on CentOS 5.6. However, what I would dearly like to see in an upcoming version is:

Nginx support out of the box with PHP 5.6 with PHP-FPM
MariaDB support out of the box - total, unobtursive, out-of-the-box replacement for MySQL and faster as a bonus.

I am currently testing a customised version of the centmin script from BTCentral - http://www.btcentral.org.uk/projects/centmin/ - , customised by a vBulletin guru: http://vbtechsupport.com/920/

It is this script that I am using to attempt to install iRedmail in concert with. Having Nginx and MariaDB support already in iRedmail would make things alot easier.....

Cheers
Bruce

97

Re: Wishlist for iRedMail-0.8.0

Just more on MariaDB. This is a post from webhostingtalk.com re MariaDB:

@newcome11, MariaDB is basically the new unofficial open-source version of mysql since it moved over to oracle - plus they made some nice feature/performance improvements, though the speed increase is subtle in smaller environments like you'd find on a vps.

It's essentially a drop in replacement for now, though in the future they may start to diverge and mysql 5.5 seems to be determined to improve performance nicely.

Read more here from the guy who forked it http://kb.askmonty.org/v/mariadb-versus-mysql

98

Re: Wishlist for iRedMail-0.8.0

I wish these upgrades on FreeBSD port;

Postfix 2.8
Python 2.7 (works very well on FreeBSD)
MySQL 5.5 (but MariaDB is an other good option)
amavisd-new 2.7 (new release offers a lot of changes. Just now FreeBSD amavisd-new 2.7 update released but can not reconfigure out by myself. May be a update procedure is necessary for this.
Dovecot 2.0

and others.

FreeBSD mostly offers more recent versions of softwares.

Sorry about my English.

Best Regards.

Hasan Alp iNAN

99

Re: Wishlist for iRedMail-0.8.0

hainan wrote:

Postfix 2.8
Python 2.7 (works very well on FreeBSD)

May i know which features new in v2.8 you will use?

hainan wrote:

MySQL 5.5 (but MariaDB is an other good option)

Waiting for binary packages from upstream.

hainan wrote:

amavisd-new 2.7 (new release offers a lot of changes.

2.6.x is enough, will stay on it and waiting for upstream from other Linux distributions repositories.

hainan wrote:

Dovecot 2.0

Dovecot-1.2 is quite stable, will stay on it at this time.

100

Re: Wishlist for iRedMail-0.8.0

I would love to run iredmail on openbsd!~